Hi Mohammed Yousef,

Actually, CAS service URL is the identifier of the application that the
client is trying to access. In almost all cases, this will be the URL of
the application (https://[server-address]/cas-client-webapp/) and the
server-address should always point to the location where this sample
application (cas-client-webapp) is deployed.

If I understood you correctly, you are setting Service Url:
https://test.kfupm.edu.sa in the service provider configuration and trying
to access that service using some other URL say
https://test.kfupm.edu.sa/en/?next=/details and you end up with 500
internal server error.

If that so, the reason for this error is, When we processing the login
response we are getting the serviceUrlFromRequest [1] (ie,
https://test.kfupm.edu.sa/en/?next=/details) and with this URL, the service
provider details get retrieved [2]. Since you are not registering the
service provider with the service URL:
https://test.kfupm.edu.sa/en/?next=/details it returns the default service
provider configurations. That causes an issue here.

As a workaround, you may extend the source code [3] and you may pass the
exact base URL of the service instead of getting the service URL from the
request then hopefully, it will give the exact service provider
configurations.

[1]
https://github.com/wso2-extensions/identity-inbound-auth-cas/blob/master/components/cas-inbound-authenticator/src/main/java/org/wso2/carbon/identity/sso/cas/processor/SSOLoginProcessor.java#L77
[2]
https://github.com/wso2-extensions/identity-inbound-auth-cas/blob/master/components/cas-inbound-authenticator/src/main/java/org/wso2/carbon/identity/sso/cas/util/CASSSOUtil.java#L120
[3] https://github.com/wso2-extensions/identity-inbound-auth-cas

Thanks,
Kanapriya Kuleswararajan
Software Engineer
Mobile : - 0774894438
Mail: - [email protected]
LinkedIn : - https://www.linkedin.com/in/kanapriya-kules-94712685/
WSO2, Inc.
lean. enterprise. middleware



On Wed, Feb 6, 2019 at 3:47 PM Shakila Sasikaran <[email protected]> wrote:

> [Forwarding to dev]
>
> ---------- Forwarded message ---------
> From: Mohammed Yousef M. Alnajdi <[email protected]>
> Date: Tue, Feb 5, 2019 at 3:31 PM
> Subject: Wso2 Identity Server: identity-inbound-auth-cas
> To: [email protected] <[email protected]>
> Cc: [email protected] <[email protected]> <[email protected]
> <[email protected]>>
>
>
> Greeting Team,
>
> I would like to express that i am really grateful to the work you guys put
> for the open source community.
>
> I have 1 small comment/issue regarding the "identity-inbound-auth-cas" i
> will try to describe my issue and how i want to solve it.
>
>
>    - I configured a new service provider with the name test.kfupm.edu.sa
>    - I configured the CAS URL as https://test.kfupm.edu.sa
>    - If i go now to https://test.kfupm.edu.sa everything works fine and i
>    can see in the url i am getting the sp=test.kfupm.edu.sa
>    but when i try to have anything like this
>    https://test.kfupm.edu.sa/en/?next=/details the cas configuration
>    won't work and i would get the sp=default.
>    So the issue is i can only have 1 url for cas i want it accept and
>    check for the base url which is https://test.kfupm.edu.sa which should
>    be
>    enough for CAS to find out which SP it is.
>
>
>
> https://stackoverflow.com/questions/54396657/how-to-extend-wso2-identity-inbound-auth-cas-to-accept-a-wildcard-url
>
> Thanks a lot
>
> *Best Regards.*
> *Mohammed Y. Alnajdi.*
> *Software Developer.*
> *ICTC - Solution Delivery Team.*
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to